Gregory's Server
This.
Don't usually do a plug on the Masto but if you haven't read [RE]CODING <AMERICA/> I would highly recommend it
I don't want to paint the landscape as a B&W one (it isn't) but there are large portions of goverment where the relationship with tech vendors is an extrodinarily unhealthy one, where there truly is no strategic IT function (for the reasons you mention and more) and the vendors who are entrenched in that vertical are highly motivated to keep it that way